Cumulative update fails due to certificate permissions

I had an issue applying CU9 for Exchange 2019 and as it took a while to sort I thought I would post to share how I resolved it in case it helps anyone else.   The CU failed at Step 8 of 10 Mailbox ...